三件事都是「界面上明明该有、但用起来不通」的地方:
1) 时间输入框只能点右侧那个小日历图标才弹选择器
原生行为如此(而且各浏览器还不一致),用户会以为输入框是只读的。
在全局脚本里给 datetime-local / date 挂 click → showPicker(),
等于把整块输入区都当成那个图标;选择器已在显示时再调是空操作,
不支持的浏览器静默跳过。顺带给可点光标。
写在 layout.php 里,所以签到时间等其它时间框一并生效。
2) 起点/终点的精确位置此前只存在页面上,没有落库
高德选点回调里拿到的 lng/lat 现在随节点一起存库,节点详情页和
表单页都生成高德导航链接,点一下就能直接导航过去(手机端会尝试
唤起高德 App)。链接只给 to 不给 from,让移动端自动用当前位置当起点。
⚠️ 高德 URI API 的坐标顺序是「经度,纬度」,写反了不报错、只会安静地
导到地球另一边,所以单独写了单元测试守住顺序。
手工改地名时会清掉旧坐标,退化成关键字搜索,避免「名字改了位置没改」。
3) 节点处不能上传图片附件
节点表单改成 multipart,加拖放区 + 多选 + 本地预览 + 逐个移除,
编辑态可勾选删除已有附件(逐条校验归属,防止改 id 删到别人家的文件)。
上传逻辑从 AttachmentController 抽到 src/Uploads.php,两处共用一份:
MIME 白名单、大小上限、孤儿回滚各抄一份迟早走偏。
请求体超过 post_max_size 时 PHP 会静默丢掉 $_POST 与 $_FILES,紧随的
CSRF 校验必然失败、报「请求已过期」——这是最难排查的一类问题。
现在按 CONTENT_LENGTH 提前识别并给出人话提示,且该守卫必须排在
csrf_check() 之前(只读长度、不改状态,所以顺序上是安全的)。
已验证:本地 php -l 全量、模板渲染 255 项、amap_nav_url 单测 18 项、
真实浏览器交互 47 项(时间框三处点击都弹、多选/移除后 input.files 真被
改写、超限被前端拦下、导航链接随选点刷新、勾选删除变红、三视口无溢出)、
打包 57 文件、远端 e2e 267 项,全部通过;部署后双 PHP 渲染逐字节一致。
165 lines
6.9 KiB
PHP
165 lines
6.9 KiB
PHP
<?php
|
|
declare(strict_types=1);
|
|
|
|
require __DIR__ . '/src/Database.php';
|
|
require __DIR__ . '/src/Auth.php';
|
|
require __DIR__ . '/src/helpers.php';
|
|
require __DIR__ . '/src/Comments.php';
|
|
require __DIR__ . '/src/Members.php';
|
|
require __DIR__ . '/src/Expenses.php';
|
|
require __DIR__ . '/src/Access.php';
|
|
require __DIR__ . '/src/Migrate.php';
|
|
require __DIR__ . '/src/Mime.php';
|
|
require __DIR__ . '/src/Settings.php';
|
|
require __DIR__ . '/src/Oss.php';
|
|
require __DIR__ . '/src/Storage.php';
|
|
require __DIR__ . '/src/Attachments.php';
|
|
require __DIR__ . '/src/Uploads.php';
|
|
require __DIR__ . '/src/Controllers/AuthController.php';
|
|
require __DIR__ . '/src/Controllers/AttachmentController.php';
|
|
require __DIR__ . '/src/Controllers/ActivityController.php';
|
|
require __DIR__ . '/src/Controllers/NodeController.php';
|
|
require __DIR__ . '/src/Controllers/UserController.php';
|
|
require __DIR__ . '/src/Controllers/NodeTypeController.php';
|
|
require __DIR__ . '/src/Controllers/TravelModeController.php';
|
|
require __DIR__ . '/src/Controllers/VehicleController.php';
|
|
require __DIR__ . '/src/Controllers/RoleTagController.php';
|
|
require __DIR__ . '/src/Controllers/MemberController.php';
|
|
require __DIR__ . '/src/Controllers/CommentController.php';
|
|
require __DIR__ . '/src/Controllers/ExpenseController.php';
|
|
require __DIR__ . '/src/Controllers/MediaController.php';
|
|
require __DIR__ . '/src/Controllers/SettingsController.php';
|
|
|
|
use App\Auth;
|
|
use App\Controllers\AuthController;
|
|
use App\Controllers\ActivityController;
|
|
use App\Controllers\AttachmentController;
|
|
use App\Controllers\NodeController;
|
|
use App\Controllers\UserController;
|
|
use App\Controllers\NodeTypeController;
|
|
use App\Controllers\TravelModeController;
|
|
use App\Controllers\VehicleController;
|
|
use App\Controllers\RoleTagController;
|
|
use App\Controllers\MemberController;
|
|
use App\Controllers\CommentController;
|
|
use App\Controllers\ExpenseController;
|
|
use App\Controllers\MediaController;
|
|
use App\Controllers\SettingsController;
|
|
|
|
session_start();
|
|
date_default_timezone_set('Asia/Shanghai');
|
|
|
|
$route = $_GET['r'] ?? 'activities/index';
|
|
|
|
// 白名单:无需登录即可访问
|
|
$publicRoutes = ['auth/login', 'auth/doLogin'];
|
|
|
|
// 未登录时,强制跳转登录页
|
|
if (!in_array($route, $publicRoutes, true) && !Auth::check()) {
|
|
redirect('auth/login');
|
|
}
|
|
|
|
$map = [
|
|
// 认证
|
|
'auth/login' => [AuthController::class, 'login'],
|
|
'auth/doLogin' => [AuthController::class, 'doLogin'],
|
|
'auth/logout' => [AuthController::class, 'logout'],
|
|
|
|
// 活动
|
|
'activities/index' => [ActivityController::class, 'index'],
|
|
'activities/create' => [ActivityController::class, 'create'],
|
|
'activities/store' => [ActivityController::class, 'store'],
|
|
'activities/edit' => [ActivityController::class, 'edit'],
|
|
'activities/update' => [ActivityController::class, 'update'],
|
|
'activities/destroy' => [ActivityController::class, 'destroy'],
|
|
'activities/show' => [ActivityController::class, 'show'],
|
|
|
|
// 节点附件
|
|
'attachments/node' => [AttachmentController::class, 'node'],
|
|
'attachments/upload' => [AttachmentController::class, 'upload'],
|
|
'attachments/destroy' => [AttachmentController::class, 'destroy'],
|
|
'activities/uploadCover' => [ActivityController::class, 'uploadCover'],
|
|
|
|
// 媒体代理(照片/封面都经这里输出,不暴露 OSS 地址)
|
|
'media/show' => [MediaController::class, 'show'],
|
|
'media/cover' => [MediaController::class, 'cover'],
|
|
|
|
// 存储设置(仅管理员)
|
|
'settings/index' => [SettingsController::class, 'index'],
|
|
'settings/save' => [SettingsController::class, 'save'],
|
|
'settings/test' => [SettingsController::class, 'test'],
|
|
'settings/roles' => [SettingsController::class, 'roles'],
|
|
|
|
// 节点
|
|
'nodes/create' => [NodeController::class, 'create'],
|
|
'nodes/store' => [NodeController::class, 'store'],
|
|
'nodes/show' => [NodeController::class, 'show'],
|
|
'nodes/edit' => [NodeController::class, 'edit'],
|
|
'nodes/update' => [NodeController::class, 'update'],
|
|
'nodes/destroy' => [NodeController::class, 'destroy'],
|
|
'nodes/status' => [NodeController::class, 'status'],
|
|
'nodes/fromPlan' => [NodeController::class, 'fromPlan'],
|
|
|
|
// 节点参与人
|
|
'members/store' => [MemberController::class, 'store'],
|
|
'members/destroy' => [MemberController::class, 'destroy'],
|
|
'members/addAll' => [MemberController::class, 'addAll'],
|
|
|
|
// 评论(活动级 + 节点级)
|
|
'comments/store' => [CommentController::class, 'store'],
|
|
'comments/destroy' => [CommentController::class, 'destroy'],
|
|
|
|
// 花销与分摊
|
|
'expenses/store' => [ExpenseController::class, 'store'],
|
|
'expenses/destroy' => [ExpenseController::class, 'destroy'],
|
|
|
|
// 角色标签
|
|
'role_tags/index' => [RoleTagController::class, 'index'],
|
|
'role_tags/create' => [RoleTagController::class, 'create'],
|
|
'role_tags/store' => [RoleTagController::class, 'store'],
|
|
'role_tags/edit' => [RoleTagController::class, 'edit'],
|
|
'role_tags/update' => [RoleTagController::class, 'update'],
|
|
'role_tags/destroy' => [RoleTagController::class, 'destroy'],
|
|
|
|
// 用户
|
|
'users/index' => [UserController::class, 'index'],
|
|
'users/create' => [UserController::class, 'create'],
|
|
'users/store' => [UserController::class, 'store'],
|
|
'users/edit' => [UserController::class, 'edit'],
|
|
'users/update' => [UserController::class, 'update'],
|
|
'users/destroy' => [UserController::class, 'destroy'],
|
|
'users/uploadAvatar' => [UserController::class, 'uploadAvatar'],
|
|
|
|
// 节点类型
|
|
'node_types/index' => [NodeTypeController::class, 'index'],
|
|
'node_types/create' => [NodeTypeController::class, 'create'],
|
|
'node_types/store' => [NodeTypeController::class, 'store'],
|
|
'node_types/edit' => [NodeTypeController::class, 'edit'],
|
|
'node_types/update' => [NodeTypeController::class, 'update'],
|
|
'node_types/destroy' => [NodeTypeController::class, 'destroy'],
|
|
|
|
// 出行方式
|
|
'travel_modes/index' => [TravelModeController::class, 'index'],
|
|
'travel_modes/create' => [TravelModeController::class, 'create'],
|
|
'travel_modes/store' => [TravelModeController::class, 'store'],
|
|
'travel_modes/edit' => [TravelModeController::class, 'edit'],
|
|
'travel_modes/update' => [TravelModeController::class, 'update'],
|
|
'travel_modes/destroy' => [TravelModeController::class, 'destroy'],
|
|
|
|
// 车辆
|
|
'vehicles/index' => [VehicleController::class, 'index'],
|
|
'vehicles/create' => [VehicleController::class, 'create'],
|
|
'vehicles/store' => [VehicleController::class, 'store'],
|
|
'vehicles/edit' => [VehicleController::class, 'edit'],
|
|
'vehicles/update' => [VehicleController::class, 'update'],
|
|
'vehicles/destroy' => [VehicleController::class, 'destroy'],
|
|
];
|
|
|
|
if (!isset($map[$route])) {
|
|
http_response_code(404);
|
|
exit('404 页面不存在: ' . htmlspecialchars($route));
|
|
}
|
|
|
|
[$class, $method] = $map[$route];
|
|
(new $class())->$method();
|